Known vulnerabilities in qemu (Alpine package)

Vendor: Alpine Linux Development Team
Software: qemu (Alpine package)
Software CPE: cpe:2.3:o:alpine:qemu_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 45
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qemu (Alpine package) qemu (Alpine package) is affected by 45 known vulnerabilities: 1 critical, 4 high, 26 medium, 14 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU45985 - Out-of-bounds write
CVE-2020-14364		 CWE-787 Medium
Available
No
 5.1.0-r1 24.08.2020 SB2020082410
SB2020090715
SB2020091121
and 35 more
#VU12554 - Integer overflow
CVE-2017-5898		 CWE-190 Low
No
No
 2.8.1-r1, 2.8.1.1-r0 10.05.2018 SB2018031522
SB2017061635
SB2017022105
#VU32092 - Heap-based Buffer Overflow
CVE-2017-5931		 CWE-122 High
No
No
 2.8.1-r1, 2.8.1.1-r0 27.03.2017 SB2017032703
SB2017061636
SB2017022105
#VU32084 - Missing release of memory after effective lifetime
CVE-2017-5856		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 16.03.2017 SB2017031626
SB2017061633
SB2017022105
#VU32085 - Missing release of memory after effective lifetime
CVE-2017-5857		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 16.03.2017 SB2017031627
SB2017061634
SB2017022105
#VU32091 - Out-of-bounds read
CVE-2017-5667		 CWE-125 Low
No
No
 2.8.1-r1, 2.8.1.1-r0 16.03.2017 SB2017031628
SB2017061632
SB2017022105
#VU32078 - Missing release of memory after effective lifetime
CVE-2016-10155		 CWE-401 Medium
No
No
 2.8.1.1-r0 15.03.2017 SB2017031513
SB2017061617
SB2017022105
#VU32080 - Missing release of memory after effective lifetime
CVE-2017-5525		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 15.03.2017 SB2017031514
SB2017061628
SB2017022105
#VU32081 - Missing release of memory after effective lifetime
CVE-2017-5552		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 15.03.2017 SB2017031515
SB2017061629
SB2017022105
#VU32082 - Missing release of memory after effective lifetime
CVE-2017-5578		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 15.03.2017 SB2017031516
SB2017061630
SB2017022105
#VU32083 - Missing release of memory after effective lifetime
CVE-2017-5579		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 15.03.2017 SB2017031517
SB2017061631
SB2017022105
and 2 more
#VU33055 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-6505		 CWE-835 Low
No
No
 2.8.1.1-r0 15.03.2017 SB2017031519
SB2017042013
SB2017041159
and 1 more
#VU32129 - Missing release of memory after effective lifetime
CVE-2016-7995		 CWE-401 Medium
No
No
 2.8.1-r1 10.12.2016 SB2016121009
SB2017041809
#VU32128 - Missing release of memory after effective lifetime
CVE-2016-7994		 CWE-401 Medium
No
No
 2.8.1-r1 10.12.2016 SB2016121008
SB2017041808
#VU32090 - Missing release of memory after effective lifetime
CVE-2016-9106		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 10.12.2016 SB2016121007
SB2017061627
SB2016103001
and 2 more
#VU32089 - Missing release of memory after effective lifetime
CVE-2016-9105		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 10.12.2016 SB2016121006
SB2017061626
SB2016103001
and 2 more
#VU32088 - Out-of-bounds read
CVE-2016-9104		 CWE-125 Low
No
No
 2.8.1-r1, 2.8.1.1-r0 10.12.2016 SB2016121005
SB2017061625
SB2016103001
and 2 more
#VU32087 - Memory corruption
CVE-2016-9103		 CWE-119 Low
No
No
 2.8.1-r1, 2.8.1.1-r0 10.12.2016 SB2016121004
SB2017061624
SB2016103001
and 2 more
#VU32079 - Missing release of memory after effective lifetime
CVE-2016-9102		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 10.12.2016 SB2016121002
SB2017061623
SB2016103001
and 2 more
#VU32086 - Missing release of memory after effective lifetime
CVE-2016-9101		 CWE-401 Medium
No
No
 2.8.1-r1, 2.8.1.1-r0 10.12.2016 SB2016121003
SB2017061622


Showing elements 1 - 20 out of 45